init_nnls
Static task
static1
Behavioral task
behavioral1
Sample
421602535614297d28a92b9ae4b9747c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
421602535614297d28a92b9ae4b9747c.dll
Resource
win10v2004-20231215-en
General
-
Target
421602535614297d28a92b9ae4b9747c
-
Size
24KB
-
MD5
421602535614297d28a92b9ae4b9747c
-
SHA1
fc460d9a59f6b5fcc54e9431a547e578904f7c5c
-
SHA256
7171655ab2d9ed92182e3a993eae8323892574f80a234188ce79881c0f0817d9
-
SHA512
007da51614accf40263c1f5ce6d3aa86c5e0644f267f477144cf245bae1f0a0548a1e4ed7fada833366ae05158f0bdbb25e2de24c364148ec13b18cef75c0813
-
SSDEEP
384:EdMw4sLYQJNWmGEB+ThtggCxRCydaqkn8FJj+DiPfMsB0OREkQDZ:qMwn9kmJB+ThtdCxunSPf54kQ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 421602535614297d28a92b9ae4b9747c
Files
-
421602535614297d28a92b9ae4b9747c.dll windows:5 windows x86 arch:x86
97e336e4ac4bf25a6051e25acafabcf4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
python27
PyObject_Type
PyObject_Str
PyExc_ValueError
PyDict_GetItemString
PyString_ConcatAndDel
Py_FindMethod
PyCObject_FromVoidPtr
PyString_AsString
PyString_FromFormat
PyExc_TypeError
PyMem_Free
PyDict_New
Py_InitModule4
PyType_Type
PyErr_Print
PyModule_GetDict
PyString_FromString
PyDict_SetItemString
PyErr_NewException
_Py_NoneStruct
PyArg_ParseTupleAndKeywords
Py_BuildValue
PyNumber_Int
_PyObject_New
PyDict_DelItemString
PyComplex_Type
PyType_IsSubtype
PySequence_Check
PySequence_GetItem
PyErr_Clear
PyErr_Occurred
PyImport_ImportModule
PyExc_ImportError
PyErr_SetString
PyObject_GetAttrString
PyExc_AttributeError
PyCObject_Type
PyExc_RuntimeError
PyCObject_AsVoidPtr
PyErr_Format
msvcr90
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
memcpy
memset
malloc
free
__iob_func
fprintf
sprintf
libifcoremd
for_write_seq_fmt
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
Exports
Exports
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ